package-lock-root-success.yml

name: 'package-lock.json root validator'

on:
  push:
    branches: [master]
    paths-ignore:
      - '**/package-lock.json'
      - '!package-lock.json'
  pull_request:
    branches: [master]
    paths-ignore:
      - '**/package-lock.json'
      - '!package-lock.json'

permissions:
  contents: read

jobs:
  lockfile-outside-of-root:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
        with:
          egress-policy: audit

      - run: exit 0